Last updated 31 July 2026
Code Pirates is a coding game for children aged 3 to 7, operated by Kids Paradise Sdn. Bhd. (Reg. No. 202601008285 (1670383-M)), which is the data controller for the information described here. Because our users are young children, a parent or guardian holds the account and sets up each child. We collect as little about a child as we can.
The parent or guardian signs up with an email and password and is the account holder. Children do not have their own accounts, email, or logins of their own making. A parent creates each child profile inside their account.
From the parent: email address, a password (stored only as a secure hash by our auth provider), a display name, and, on a paid plan, a plan tier and a payment reference. We never store card numbers.
About each child, created by the parent: a first name or nickname you type, an avatar the child picks, a birth year (not a full date of birth), whether they can read simple words, a short login code and an optional 4-digit PIN (the PIN is stored only as a secure hash), and in-game progress (missions played, coins earned, attempts, hints, time).
We do not collect from children: email, phone number, photographs, voice recordings, precise location, contacts, or advertising identifiers.
We use this data to run the game and save each child's progress, adapt the difficulty and block style to the child, show the parent their child's progress, send the parent account and optional product emails, and keep the service secure. We do not sell personal data, and we do not use children's data for advertising.
We collect a child's information only after the parent creates that child's profile, which is where parental consent is given. From the dashboard, a parent can review what we hold about their child, download it, and delete a child profile, which permanently removes that child's progress. To exercise any right, contact us at the address below.
Passwords and PINs are stored only as secure hashes, access is protected by row-level security so a parent only reaches their own family's data, and traffic is encrypted in transit. We keep a child's data while their profile exists; deleting the profile removes it.
Questions or requests: kidsparadisecorp@gmail.com.